Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C165CB5AC94811EFACDD7686762E951A.roa
File: C165CB5AC94811EFACDD7686762E951A.roa (raw, json)
Hash identifier: a85MsTeySL8Qp2b1zlPP2RrGypz+qyoekjR7Se9p9kQ=
Subject key identifier: 3A:40:0E:72:48:B0:C8:28:80:A7:38:A3:76:31:C8:0F:28:F4:DC:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F378
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C165CB5AC94811EFACDD7686762E951A.roa
Signing time: Thu 02 Jan 2025 20:32:59 +0000
ROA not before: Thu 02 Jan 2025 20:32:55 +0000
ROA not after: Mon 13 Dec 2027 20:32:55 +0000
asID: 17561
IP address blocks: 156.225.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62328 (0xf378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 20:32:55 2025 GMT
Not After : Dec 13 20:32:55 2027 GMT
Subject: CN=6776f7fb-4d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:88:75:e7:a3:32:b8:0d:d0:e3:cb:44:6a:
8c:2b:1c:6a:7f:db:1d:10:06:bf:96:72:83:ac:de:
25:33:3e:85:a2:fc:cf:e3:c3:6f:75:b6:70:83:51:
73:b4:23:4c:0b:7e:01:d0:db:0d:a8:6d:71:8b:ea:
45:53:fb:9f:31:7c:99:cf:3c:57:29:5e:97:ea:5c:
a4:0f:4b:24:15:cf:a7:67:45:c4:5b:c4:97:2d:c5:
f5:f7:d2:73:17:da:b2:6d:d5:98:e2:87:41:73:8b:
96:25:e8:1f:fd:7e:a7:a6:e4:ac:3a:82:b5:39:ba:
ad:98:9c:a5:95:30:02:a3:41:a5:e7:c0:bf:89:e1:
a6:c1:35:1c:cd:61:6e:82:78:b3:66:8c:5c:bb:57:
2d:d9:61:a2:bb:3d:0a:63:06:3b:1a:5c:e8:19:d9:
0b:5a:b2:f5:f7:8d:ef:b2:13:64:5c:85:0d:3d:c0:
27:05:55:b0:b7:c0:5a:98:95:89:b2:ab:73:ed:da:
e5:fb:d2:c6:a9:28:c9:50:4e:a4:21:f2:74:6f:10:
06:96:9c:17:c7:57:3d:1f:f8:53:93:0a:a9:8a:39:
19:09:df:a3:3b:db:da:9a:71:81:07:88:06:3b:51:
37:ed:11:58:4d:0f:b3:c9:87:d6:ed:dd:cf:14:77:
fc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:40:0E:72:48:B0:C8:28:80:A7:38:A3:76:31:C8:0F:28:F4:DC:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C165CB5AC94811EFACDD7686762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.56.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b1:89:81:a2:49:89:8a:c7:ce:d4:11:c0:08:f4:15:c7:c8:
a4:9a:d8:9b:07:85:8a:40:86:32:0f:86:33:6c:20:60:1f:b2:
7c:19:4e:04:27:63:b5:53:a7:c4:c8:e3:d1:3c:df:7c:4d:ec:
dd:84:9e:19:fd:f2:a4:cf:f1:1a:92:f8:58:23:af:19:47:7a:
0a:7e:4d:9a:0d:01:50:e2:63:ac:af:fa:cf:84:4e:93:8a:08:
42:76:f1:f6:13:a0:9b:d3:37:05:a9:95:84:12:00:4e:63:18:
ed:15:56:2f:4d:3e:e9:07:73:85:8c:ed:04:db:c8:44:13:6b:
00:3c:68:43:7f:7a:16:f2:b6:61:85:46:75:a1:0b:9f:65:49:
ee:50:ec:2e:ad:db:6c:8b:ea:a4:92:dd:d3:b7:50:69:b2:da:
49:c9:75:37:d8:b6:22:20:02:b7:8a:dd:dc:01:be:8e:1e:2c:
48:cb:b6:35:3f:24:69:bb:16:c9:23:aa:d2:fc:d9:4e:9f:67:
54:ff:a7:6a:a6:47:21:53:ba:88:22:01:93:65:d4:f3:f2:7b:
40:ad:b6:21:e9:9a:a0:03:79:1b:76:63:ac:c4:97:10:ae:bc:
e1:53:cd:59:02:4a:3c:c6:cf:52:92:15:ac:cf:4d:ad:f1:0b:
92:72:51:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:31 2025 by rpki-client